Here's a wild speculation:
What if Facebook is only doing this to people it profiles as non-technical and therefore unlikely to notice it?
Taking the app apart might not even be good enough since in that case those not receiving surveillance may not even have the code for surveillance. (Apple's store technically bans such practices, but this is Facebook we're talking about.)